CISA - Domain 4

Question 1

Cost of ongoing operations when a disaster recovery plan (DRP) is in place compared to not having a DRP will MOST likely

Accepted Answer

increase.

Question 2

Applying a retention date on a file will ensure that:

Accepted Answer

data will not be deleted before that date.

Question 3

Which of the following would BEST support 24/7 availability?

Accepted Answer

Mirroring

Question 4

Determining the service delivery objective should be based PRIMARILY on:

Accepted Answer

the minimum acceptable operational capability.

Question 5

While performing a review of a critical third-party application, an IS auditor would be MOST concerned with discovering:

Accepted Answer

an inadequate software escrow agreement.

Question 6

Which BEST ensures that users have uninterrupted access to a critical, heavily used web-based application?

Accepted Answer

Load balancing

Question 7

Which of the following is the MOST important consideration when defining recovery point objectives?

Accepted Answer

Acceptable data loss

Question 8

An organization's disaster recovery plan should address early recovery of:

Accepted Answer

processing in priority order, as defined by business management.

Question 9

When auditing the archiving process of emails, the IS auditor should pay the MOST attention to:

Accepted Answer

the existence of a data retention policy.

Question 10

The PRIMARY purpose of a business impact analysis is to:

Accepted Answer

define recovery strategies.

Question 11

Which is the BEST method for determining the criticality of each application system in the production environment?

Accepted Answer

Perform a business impact analysis.

Question 12

The PRIMARY objective of service-level management is to:

Accepted Answer

define, agree on, record and manage the required levels of service.

Question 13

Which of the following BEST helps define disaster recovery strategies?

Accepted Answer

Maximum tolerable downtime and data loss

Question 14

Which of the following is widely accepted as one of the critical components in networking management?

Accepted Answer

Configuration and change management

Question 15

An IS auditor finds out-of-range data in some tables of a database. Which controls should the IS auditor recommend?

Accepted Answer

Implement integrity constraints in the database.

Question 16

Which of the following is the MOST critical element to effectively execute a disaster recovery plan?

Accepted Answer

Offsite storage of backup data

Question 17

Which is the BEST indicator of the effectiveness of backup and restore procedures while restoring data after a disaster?

Accepted Answer

Recovery time objectives were met.

Question 18

Which of the following must exist to ensure the viability of a duplicate information processing facility?

Accepted Answer

Primary site workload is monitored to ensure adequate backup is available

Question 19

Doing which of the following during peak production hours could result in unexpected downtime?

Accepted Answer

Performing preventive maintenance on electrical systems

Question 20

When reviewing the desktop software compliance, the IS auditor should be MOST concerned if the installed software:

Accepted Answer

is not listed in the approved software standards document.

Question 21

In which of the following situations is it MOST appropriate to implement data mirroring as the recovery strategy?

Accepted Answer

The recovery point objective is low.

Question 22

A database administrator (DBA) who needs to make emergency change to a database after normal working hours should log in

Accepted Answer

with their named account to make the changes.

Question 23

An IS auditor should recommend the use of library control software to provide reasonable assurance that:

Accepted Answer

program changes have been authorized.

Question 24

Which would be the MOST appropriate recovery strategy for a sensitive system with a high recovery time objective (RTO)?

Accepted Answer

Cold site

Question 25

An IS auditor reviewing an organization's disaster recovery plan should PRIMARILY verify that it is:

Accepted Answer

regularly reviewed and updated.

CISA - Domain 4

Questions 25

CISA - Domain 4

Questions 25